837783435cc4f33fbe00e59a056aa59a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

837783435cc4f33fbe00e59a056aa59a_JaffaCakes118
Size

381KB
MD5

837783435cc4f33fbe00e59a056aa59a
SHA1

71c53ce72132108f97a5c92ddc60093ac5d8a098
SHA256

64e8c64d3176f5869dbdceb5397154a92ee60c087499b8e80cbaf96d44739a90
SHA512

69b5f0f8a2b8958938b56f6d18facd4edc356cd5625d8d2d865ed4521c08c2c0c0ef63cff615ef5bc01f7a4e473801e44844e666c668e92cada5d9ea1e987945
SSDEEP

6144:lV5mBRMDnFnH3VY8xm+vZp2Ni3kA+Gcyj7/M+h8yf4fBj89HXj9dbad:oBRMd3Vj4S8UyOopLJk3Wd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
837783435cc4f33fbe00e59a056aa59a_JaffaCakes118

Files

837783435cc4f33fbe00e59a056aa59a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f8df84bfd5aff8cf9bf6d9fe57350e86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
GetFileTime
GlobalFree
GlobalFlags
ReleaseMutex
InitializeCriticalSection
GetCurrentProcessId
CreateEventW
CloseHandle
HeapCreate
ReleaseMutex
WriteFile
LoadLibraryW
LocalFree
GetPrivateProfileStringA
GetCurrentThreadId
GetEnvironmentVariableW
GetDriveTypeA
IsBadStringPtrW
lstrlenW

user32

SetFocus
DrawTextA
IsWindow
GetClassInfoA
GetSysColor
CallWindowProcW
GetKeyboardType
DrawStateW
CreateWindowExA
GetSysColor
EndDialog
GetClientRect
DispatchMessageA

pnrpnsp

NSPStartup
NSPStartup
NSPStartup
NSPStartup
NSPStartup

advapi32

InitializeSid

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 371KB - Virtual size: 370KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ